Configure IRM in hybrid deployments

Applies to: Exchange Server 2013, Exchange Online

Topic Last Modified: 2013-07-10

If you use Information Rights Management (IRM) in your on-premises Exchange organization and you want your Exchange Online users to also use IRM in your hybrid deployment, this topic explains how to achieve that outcome.

This feature of Exchange Server 2013 isn’t fully compatible with Office 365 operated by 21Vianet in China and some feature limitations may apply. For more information, see Learn about Office 365 operated by 21Vianet.

You need to be assigned permissions before you can perform this procedure or procedures. To see what permissions you need, see the “Information Rights Management (IRM) configuration" entry in the Messaging policy and compliance permissions topic.

Configure your Exchange organization for a hybrid deployment using the Hybrid Configuration wizard.

To configure IRM in a hybrid deployment, you need to use Windows PowerShell to access your on-premises AD RMS server. Learn more at Using Windows PowerShell to Administer AD RMS. Do the following to configure your on-premises AD RMS server:

Outlook Web App users should be able to apply AD RMS templates to new messages. Outlook Web App and Exchange ActiveSync users should be able to read messages that have AD RMS templates applied to them. In addition, all the AD RMS templates that were imported from your on-premises organization should be listed when you run the Get-RMSTemplate cmdlet.

To verify that you have successfully configured IRM, run the following command in the Exchange Online organization.